Submit a user claims request
POST/userinfo
POST variant of the UserInfo endpoint as required by
OIDC Core 1.0 Section 5.3.
The access token may be submitted either in the Authorization request header as a
Bearer token or as the access_token form parameter in the request body.
Response and error semantics are identical to the GET variant.
Refer to the introduction section for details on how to configure this use case.
Request
Header Parameters
Bearer access token. Required when access_token form parameter is not used. Format: Bearer <access_token>.
- application/x-www-form-urlencoded
Body
The access token as a form parameter. Alternative to the Authorization header. Using the Authorization header is preferred.
Responses
- 200
- 401
User claims returned successfully
- application/json
- Schema
- Example (from schema)
Schema
Subject identifier — the nevisIDM user's external ID (extid).
Full name of the user, composed from title, first name, and family name.
Given name (first name) of the user.
Family name (surname) of the user.
Preferred username — the nevisIDM login ID.
Email address of the user.
Phone number of the user.
Birthdate of the user in ISO 8601 format (YYYY-MM-DD).
Possible values: [male, female, other, unknown]
Gender of the user. Derived from the nevisIDM sex code.
Locale of the user in BCP 47 format.
Time the user's information was last updated, as Unix epoch seconds.
address object
Physical mailing address of the user.
Full formatted address.
Street address, including house number.
City or locality.
Region or state.
Postal or ZIP code.
Country name.
{
"sub": "user-123",
"name": "Dr. John Doe",
"given_name": "John",
"family_name": "Doe",
"preferred_username": "johndoe",
"email": "[email protected]",
"phone_number": "+41791234567",
"birthdate": "1980-01-01",
"gender": "male",
"locale": "en-US",
"updated_at": 1633036800,
"address": {
"formatted": "Dr. John Doe, Badenerstrasse 13, 8004 Zürich, Switzerland",
"street_address": "Badenerstrasse 13",
"locality": "Zürich",
"region": "ZH",
"postal_code": "8004",
"country": "Switzerland"
}
}
The access token is missing, expired, revoked, or otherwise invalid.